Re: SSL problem in pgAdmin3 1.8.0 beta 5

2007/9/26, Dave Page <dpage(at)postgresql(dot)org>:
>
> Alejandro Gasca wrote:
> > Hi.
> >
> > I'm using pgAdmin3 1.8.0 beta 5, with winXp sp2.
> >
> > When trying to stablish a ssl connection, the appication crash with this
> > error:
> >
> > OpenSSL: Fatal
> >
> > OPENSSL_Uplink(00FD010,05): no OPENSSL_Applink.
> >
>
> It works fine for me (using the released version of beta 5 on XP Pro
> SP2, with 8.2.2 running with a certificate generated per the PostgreSQL
> docs). That error looks a little odd though - can you send the pgAdmin
> logfile please?
>
> Can anyone else reproduce this?
>
> Regards, Dave.
>
starting with a new log file, and just open an closing pgAdmin the log says
(i put logging to "debug"):

2007-09-26 04:34:56 INFO :
##############################################################
2007-09-26 04:34:56 INFO : # pgAdmin III Version 1.8.0 Beta 5 Startup
2007-09-26 04:34:56 INFO :
##############################################################
2007-09-26 04:34:56 INFO : Compiled with dynamically linked SSL support
2007-09-26 04:34:56 INFO : Running a RELEASE build.
2007-09-26 04:34:56 INFO : i18n path : C:\Archivos de programa\pgAdmin
III\1.8/i18n
2007-09-26 04:34:56 INFO : UI path : C:\Archivos de programa\pgAdmin
III\1.8/../ui
2007-09-26 04:34:56 INFO : Doc path : C:\Archivos de programa\pgAdmin
III\1.8/docs
2007-09-26 04:34:56 INFO : Branding path: C:\Archivos de programa\pgAdmin
III\1.8/../../branding
2007-09-26 04:34:56 INFO : PG pg_dump : C:\Archivos de programa\pgAdmin
III\1.8\pg_dump.exe
2007-09-26 04:34:56 INFO : PG pg_dumpall : C:\Archivos de programa\pgAdmin
III\1.8\pg_dumpall.exe
2007-09-26 04:34:56 INFO : PG pg_restore : C:\Archivos de programa\pgAdmin
III\1.8\pg_restore.exe
2007-09-26 04:34:56 INFO : EDB pg_dump :
2007-09-26 04:34:56 INFO : EDB pg_dumpall:
2007-09-26 04:34:56 INFO : EDB pg_restore:
2007-09-26 04:34:56 INFO : Using embedded XRC data.
2007-09-26 04:34:56 INFO : PG Help :
http://www.postgresql.org/docs/current/static/
2007-09-26 04:34:56 INFO : EDB Help :
http://www.enterprisedb.com/documentation/8.2/
2007-09-26 04:34:56 INFO : Slony Help :
http://www.slony.info/documentation/
2007-09-26 04:34:58 INFO : Using fontmetrics 6/13, 8 Point
2007-09-26 04:34:58 INFO : Native Description
'0;-11;0;0;0;400;0;0;0;0;0;0;0;0;MS Shell Dlg 2'
2007-09-26 04:34:58 INFO : Draw size of 'M': w=8, h=13, descent 2,
external lead 0.
2007-09-26 04:34:58 INFO : Draw size of 'g': w=6, h=13, descent 2,
external lead 0.
2007-09-26 04:34:58 INFO : Draw size of 'Mg': w=14, h=13, descent 2,
external lead 0.
2007-09-26 04:34:59 INFO : Reloading servers...
2007-09-26 04:34:59 INFO : Displaying properties for Servers Servers
2007-09-26 04:34:59 STATUS : Retrieving Servers details...
2007-09-26 04:34:59 STATUS : Retrieving Servers details... (0.00 secs)
2007-09-26 04:35:02 INFO : Displaying properties for Server
10.19.73.1:50001
2007-09-26 04:35:02 STATUS : Retrieving Server details...
2007-09-26 04:35:02 STATUS : Retrieving Server details... (0.02 secs)
2007-09-26 04:35:02 INFO : Attempting to create a connection object...
2007-09-26 04:35:02 INFO : Using password file C:\Documents and
Settings\x\Datos de programa\postgresql\pgpass.conf
2007-09-26 04:35:02 STATUS : Connecting to database...
2007-09-26 04:35:02 INFO : Server name: 10.11.12.13 (resolved to:
10.11.12.13)
2007-09-26 04:35:02 INFO : Opening connection with connection string:
host='10.11.12.13' hostaddr=10.11.12.13 dbname='db' user='xxxxx' port=yyyyy
sslmode=require

And the postgres log drop this line:
2007-09-26 04:29:01 CDT LOG: could not accept SSL connection: Connection
reset by peer

The server version: "PostgreSQL 8.2.4 on i486-pc-linux-gnu, compiled by GCC
cc (GCC) 4.1.2 (Ubuntu 4.1.2-0ubuntu4)"
The keys was generated with the openssl scripts.

note.
1. If i put incorrect certificates in %appdata%\postgres pgAdmin says:
"Error connecting to the server: SSL error: certificate verify failed", as
expected.
2. using the "out of the box" dummy certs of postgres (i think from
postgresql-common) works fine. but the problem is with real certs.

Alejandro